Glad you got things working. I had a dedicated server get 'rooted' a few years ago. Thing is, once you get 'rooted' and you have no detection software or hardening in place, you stayed 'rooted'. Nearly impossible to figure out how they were getting back into the server. The only recourse was to get the 'user account' folders and 're-base' the machine. Then harden the fuck out of it. 
I was young and dumb and thought I could manage my own Ded Server. I learned a whole lot during that time.
I'm really glad you haven't had any more problems. Sucks, bro.
I was young and dumb and thought I could manage my own Ded Server. I learned a whole lot during that time. I'm really glad you haven't had any more problems. Sucks, bro.